D-Link Forums

The Graveyard - Products No Longer Supported => D-Link NetDefend Firewalls => Topic started by: dama_ps on May 27, 2010, 12:33:19 AM

Title: port forwading
Post by: dama_ps on May 27, 2010, 12:33:19 AM
hi all,
i realy love this forum :)

now i want to share another tink.
i use dfl 210 ,
i have two network in seperate in two building :
net_building_one : 192.168.1.0/24
net_building_two : 192.168.2.0/24
the two network are conected by radio 2.4ghz. and i use microtik system.
microtik_building1 : 192.168.1.10
microtic_building2 : 192.168.2.10
dfl-210 netdefendfirewall : 192.168.1.20

to route the client in net_building_one whose gateway to dfl 210 to network in net_building_two,
i add route in main routing dfl-210 :

interface : lan \ network : net_building_two \ gateway : microtic_building1

and ip rule :

nat_building2 : source : lan\net_building_one \\ dest : any\ net_building_two | nat | service: all_proto

then i test ping from net_building_one to net_building_two it's working,
but not if i test ping from building_two to building_one.

pls sugetion.
thx











Title: Re: port forwading
Post by: danilovav on May 27, 2010, 07:12:03 PM
Why you use NAT? To connect networks, you need to make bi-directional Allow rules like below
Allow lan/net_building_one lan/net_building_two all_services
Allow lan/net_building_two lan/net_building_one all_services

And where is port forwarding? :D
Title: Re: port forwading
Post by: dama_ps on June 09, 2010, 06:53:11 PM
tanks danilovav,
i already try  to change to alow, but not working also.
its mak form building one can't akses to buiding two.
if i do trace route it's break after they rach the microtik. (after microtik shoud go to the dfl isn't it?)
Title: Re: port forwading
Post by: danilovav on June 09, 2010, 10:28:26 PM
hmm.. please make a graphics scheme with networks and addresses
Title: Re: port forwading
Post by: dama_ps on June 17, 2010, 11:42:10 PM
how i can put a image to this forum?
Title: Re: port forwading
Post by: frankijskes on June 18, 2010, 04:26:48 AM
Use ascii

(local network: 192.168.10.0/24) --- dlink =====internet======== dlink (remote network: 192.168.11.0/24)

Or something like that.
Title: Re: port forwading
Post by: danilovav on June 18, 2010, 11:10:36 AM
Topicstarter has more complicant network schema, so better will be to make and share picture and add link to this topic.